March 9, 2026
False Claims Act Enforcement in Healthcare: How Practices Can Protect Themselves in 2026
- Introduction: The Government’s Most Powerful Healthcare Fraud Weapon
- What Is the False Claims Act?
- How the False Claims Act Applies to Medical Practices
- The Qui Tam (Whistleblower) Provisions
- Elements of a False Claims Act Violation
- The Knowledge Standard: What “Knowing” Really Means
- How Billing and Coding Errors Create FCA Exposure
- The AKS and Stark Law Connection to False Claims
- Penalties and Damages Under the False Claims Act
- The DOJ-HHS FCA Working Group and 2026 Enforcement Priorities
- Recent Enforcement Trends and Case Examples
- How Medical Practices Can Protect Themselves
- What to Do If Your Practice Faces an FCA Investigation
- How DoctorsManagement Helps Practices Prevent and Respond to FCA Risk
- Frequently Asked Questions
- External Resources and References
Introduction: The Government’s Most Powerful Healthcare Fraud Weapon
The False Claims Act (FCA) is the federal government’s most effective tool for combating healthcare fraud, and its reach extends far beyond intentional schemes to defraud federal programs. In fiscal year 2025, the Department of Justice recovered over $6.8 billion in FCA settlements and judgments, with healthcare fraud cases driving the majority of those recoveries. This figure represents the highest annual recovery total in recent years and reflects a sustained, well-resourced enforcement apparatus that shows no signs of slowing down.
For medical practices, the FCA creates liability exposure that extends well beyond deliberate fraud. The statute’s expansive knowledge standard captures not only intentional misconduct but also reckless disregard for billing accuracy, willful ignorance of compliance requirements, and failures to correct known errors. A practice that submits claims containing coding mistakes, documentation deficiencies, or charges arising from improperly structured referral relationships can face FCA liability even if no one in the organization intended to defraud the government.
The enforcement environment in 2026 amplifies this risk. The DOJ and HHS-OIG have established a dedicated False Claims Act Working Group to coordinate and intensify healthcare fraud enforcement. Federal agencies are deploying artificial intelligence and data analytics to identify billing anomalies and outlier patterns that trigger investigations. And the FCA’s qui tam (whistleblower) provisions continue to generate a steady flow of cases brought by current and former employees, competitors, and other insiders with knowledge of potentially non-compliant practices.
This guide explains how the False Claims Act applies to physician practices, what triggers liability, what penalties are at stake, and what steps practices can take to protect themselves. Understanding the FCA is not optional in today’s enforcement landscape. It is an essential component of responsible practice management.
What Is the False Claims Act?
The False Claims Act, codified at 31 U.S.C. Sections 3729 through 3733, is a federal statute that creates civil liability for any person who knowingly submits, or causes the submission of, a false or fraudulent claim for payment to the United States government. Originally enacted during the Civil War to combat defense contractor fraud, the FCA has evolved into the government’s primary enforcement mechanism for healthcare fraud, responsible for billions of dollars in recoveries annually.
The FCA prohibits several categories of conduct relevant to healthcare:
- Submitting false claims: Knowingly presenting, or causing to be presented, a false or fraudulent claim for payment or approval to a federal healthcare program
- Making false statements: Knowingly making, using, or causing to be made or used, a false record or statement material to a false or fraudulent claim
- Reverse false claims: Knowingly concealing or avoiding an obligation to pay or transmit money to the government, including the obligation to return overpayments
- Conspiracy: Conspiring to commit any of the above violations
The FCA is a civil statute, meaning that violations result in financial penalties rather than criminal prosecution. However, the financial penalties under the FCA are substantial, and the government often pursues FCA actions in parallel with criminal investigations under the Anti-Kickback Statute or other criminal healthcare fraud statutes.
How the False Claims Act Applies to Medical Practices
Medical practices interact with the FCA every time they submit a claim to Medicare, Medicaid, TRICARE, or any other federal healthcare program. Each submitted claim carries an implied certification that the services were medically necessary, accurately coded, properly documented, and provided in compliance with applicable laws and regulations. When any of these conditions is not met, the claim may be considered “false” for FCA purposes.
Factually False Claims
A claim is factually false when it misrepresents what actually occurred. Examples include billing for services that were never provided, billing for a higher level of service than was actually performed (upcoding), misrepresenting the identity of the provider who rendered the service, or billing for services that were not performed at the location indicated on the claim.
Legally False Claims
A claim can be legally false even if the underlying services were actually provided and accurately described. Under the “implied false certification” theory, the submission of a claim implicitly certifies compliance with all applicable legal requirements. If the provider was not in compliance with a material legal requirement at the time of submission (for example, because the claim resulted from a referral that violated the Stark Law or an arrangement that violated the Anti-Kickback Statute), the claim is considered legally false.
The Supreme Court addressed the implied certification theory in Universal Health Services v. United States ex rel. Escobar (2016), holding that the implied certification theory is viable but that the noncompliance must be material to the government’s payment decision. This materiality standard requires that the government would not have paid the claim had it known of the provider’s noncompliance.
Reverse False Claims and the 60-Day Repayment Rule
The FCA’s reverse false claims provision creates liability for providers who identify overpayments and fail to return them within the required timeframe. Under the 60-day rule (42 U.S.C. Section 1320a-7k(d)), Medicare and Medicaid providers must report and return identified overpayments within 60 days of identification or the date any corresponding cost report is due, whichever is later. Failure to timely return an overpayment creates FCA liability because the retention of the overpayment constitutes a “reverse false claim” by knowingly concealing an obligation to pay money to the government.
The 60-day rule has significant implications for practices. When internal audits, coding reviews, or billing reconciliations identify overpayments, the clock starts ticking. Practices must have systems in place to promptly investigate, quantify, and return overpayments to avoid creating FCA exposure on top of the original billing issue.
The Qui Tam (Whistleblower) Provisions
One of the FCA’s most powerful features is its qui tam provision, which allows private individuals (known as “relators”) to file lawsuits on behalf of the federal government against entities they believe have submitted false claims. Qui tam cases are filed under seal, meaning they are initially confidential while the DOJ investigates the allegations and decides whether to intervene in the case.
If the DOJ intervenes and the case results in a recovery, the relator is entitled to a share of the proceeds, typically between 15% and 25% of the total recovery. If the DOJ declines to intervene but the relator proceeds independently and succeeds, the share increases to 25% to 30%. These financial incentives have made qui tam litigation a significant driver of FCA enforcement.
For medical practices, the qui tam provisions mean that compliance failures can be exposed by anyone with inside knowledge, including:
- Current and former employees (billing staff, coders, nurses, administrative personnel)
- Competitors who become aware of non-compliant practices
- Vendors, contractors, and business associates
- Patients who observe practices inconsistent with billing records
The existence of qui tam provisions underscores the importance of maintaining a robust compliance program, fostering a culture where employees can raise concerns internally before resorting to external reporting, and addressing identified compliance issues promptly and transparently.
Elements of a False Claims Act Violation
To establish FCA liability, the government (or a qui tam relator) must prove the following elements:
A Claim Was Submitted to the Government
The FCA applies to claims submitted to, or caused to be submitted to, any federal healthcare program. Every claim submitted to Medicare, Medicaid, TRICARE, or other federal programs satisfies this element.
The Claim Was False or Fraudulent
The claim must contain a material falsehood or misrepresentation. This can be a factual inaccuracy (wrong code, wrong provider, wrong service) or a legal deficiency (the claim was tainted by an underlying legal violation such as an AKS or Stark Law breach).
The Defendant Acted Knowingly
The FCA’s knowledge standard is significantly broader than what most providers expect. It encompasses actual knowledge of the claim’s falsity, deliberate ignorance of the truth or falsity of the information, and reckless disregard for the truth or falsity of the information. The government does not need to prove specific intent to defraud.
The False Statement Was Material
Following the Escobar decision, the false statement or noncompliance must be material to the government’s payment decision. A violation is material if it has a natural tendency to influence, or be capable of influencing, the payment or receipt of money from the government.
The Knowledge Standard: What “Knowing” Really Means
The FCA’s knowledge standard is one of its most consequential features for medical practices, because it captures conduct that falls well short of intentional fraud. The statute defines “knowing” and “knowingly” to include three levels of culpability:
Actual Knowledge
The person had direct awareness that the claim was false. This is the most straightforward level and applies to situations where a provider deliberately submits a claim for services not rendered or intentionally upcodes to increase reimbursement.
Deliberate Ignorance
The person deliberately avoided learning information that would have revealed the claim’s falsity. This standard targets providers who structure their operations to avoid discovering compliance problems. A physician who refuses to review audit findings, a practice that declines to implement coding oversight, or a billing department that ignores persistent patterns of claim denials may be acting with deliberate ignorance.
Reckless Disregard
The person acted with reckless disregard for the truth or falsity of the claim. This is the broadest level and captures situations where the provider failed to exercise reasonable diligence to ensure claim accuracy. A practice that submits claims without adequate documentation review, that fails to train billing staff on current coding requirements, or that ignores known compliance risks may be acting with reckless disregard.
Critical implication: The FCA does not require proof of specific intent to defraud. This means that billing errors resulting from inadequate training, insufficient oversight, or failure to respond to known compliance deficiencies can create FCA liability. Practices cannot rely on the defense that they “didn’t mean to submit false claims” if they failed to take reasonable steps to ensure claim accuracy.
How Billing and Coding Errors Create FCA Exposure
The most common pathway to FCA liability for medical practices is through billing and coding errors that are submitted repeatedly without detection or correction. While individual coding mistakes may not constitute FCA violations (absent the requisite knowledge standard), systemic patterns of errors often satisfy the reckless disregard or deliberate ignorance thresholds.
Common Error Patterns That Trigger FCA Risk
- Systematic upcoding: A consistent pattern of billing evaluation and management services at higher levels than documentation supports. Practices that predominantly bill at the highest E/M levels without corresponding documentation complexity attract enforcement scrutiny.
- Unbundling: Separately billing for services that should be reported as a single bundled code. This can occur when billing staff lack familiarity with correct coding initiative (CCI) edits or when practice management systems are not configured to flag bundling issues.
- Billing for services not documented: Submitting claims for procedures, tests, or services that are not reflected in the patient’s medical record. Documentation must support every service billed.
- Medical necessity failures: Billing for services that were not medically necessary based on the patient’s clinical presentation. Payers require that services meet medical necessity criteria, and claims for medically unnecessary services are false claims.
- Modifier misuse: Incorrect use of modifiers (particularly Modifier 25 for significant, separately identifiable E/M services on the same day as a procedure) can result in overpayments that constitute false claims.
- Duplicate billing: Submitting claims for the same service more than once, whether due to system errors or inadequate claim tracking processes.
- Failure to refund overpayments: Identifying an overpayment and failing to return it within 60 days creates reverse false claims liability independent of the original billing error.
The AKS and Stark Law Connection to False Claims
The Affordable Care Act created a direct statutory link between Anti-Kickback Statute violations and the False Claims Act. Under 42 U.S.C. Section 1320a-7b(g), any claim that includes items or services resulting from a violation of the AKS is deemed a false or fraudulent claim for purposes of the FCA. This provision eliminates the need for the government to independently prove that the claim was false. If the underlying arrangement violated the AKS, every claim generated through that arrangement automatically constitutes a false claim.
Similarly, claims submitted for designated health services rendered pursuant to referrals that violate the Stark Law are not payable by Medicare or Medicaid. The submission of such claims creates FCA liability because the practice is certifying (implicitly or explicitly) that the services are payable when they are not.
This intersection means that a single improperly structured financial relationship can generate FCA liability for every claim submitted in connection with that relationship. For a practice that submits hundreds or thousands of claims per year relating to a particular referral source, the cumulative FCA exposure from a single non-compliant arrangement can be enormous.
Penalties and Damages Under the False Claims Act
The FCA imposes significant financial penalties that can quickly escalate to practice-threatening levels:
- Per-claim penalties: The FCA provides for civil penalties of between $13,946 and $27,894 per false claim (as adjusted for inflation; these figures are current as of 2025 and subject to annual updates). Because each individual claim constitutes a separate violation, practices that submit large volumes of claims can face per-claim penalties totaling millions of dollars.
- Treble damages: In addition to per-claim penalties, the FCA allows the government to recover up to three times the amount of damages sustained by the government as a result of the false claims. This means the government can recover triple the overpayment amount.
- Investigation and defense costs: Even if a practice ultimately reaches a favorable resolution, the costs of defending an FCA investigation can be substantial, including attorney fees, expert witness costs, document production expenses, and the operational disruption of responding to government inquiries.
Illustrative example: If a practice submitted 500 claims over two years in connection with a referral arrangement that violated the Anti-Kickback Statute, and each claim resulted in an average overpayment of $200, the practice’s FCA exposure could include: per-claim penalties of $6.97 million to $13.95 million (500 claims multiplied by $13,946 to $27,894), plus treble damages of $300,000 (3 times $100,000 in total overpayments), for total potential liability exceeding $7 million. This example illustrates how quickly FCA exposure can escalate, even for relatively modest individual claim amounts.
The DOJ-HHS FCA Working Group and 2026 Enforcement Priorities
In 2025, the Department of Justice and HHS announced the creation of a False Claims Act Working Group designed to strengthen coordination between the two agencies in investigating and prosecuting healthcare fraud. This Working Group has identified several priority areas that physician practices should monitor closely:
Medicare Advantage Risk Adjustment
The Working Group has explicitly identified Medicare Advantage risk adjustment fraud as a priority. This includes inaccurate HCC coding that inflates risk scores and generates excess payments from CMS. Practices that bill MA plans should ensure their diagnosis coding and documentation accurately reflect patient clinical conditions without overstatement.
Telehealth Fraud
Virtual care billing remains a high-priority enforcement area. The OIG Work Plan includes multiple items targeting telehealth billing accuracy, appropriate utilization, and compliance with supervision and licensure requirements. Practices offering telehealth services should verify that their billing practices comply with all applicable federal and state requirements.
Laboratory and Diagnostic Testing
Medically unnecessary laboratory and diagnostic testing, particularly when ordered through referral arrangements that may involve kickbacks, continues to generate significant enforcement activity. Practices should ensure that all testing ordered is medically necessary and documented accordingly.
AI-Enhanced Detection
Federal agencies are increasingly using artificial intelligence and machine learning tools to identify billing outliers, referral pattern anomalies, and financial arrangement irregularities that suggest potential fraud. The Health Care Fraud Data Fusion Center is enabling faster case development, often identifying investigative targets before whistleblowers file qui tam actions.
Recent Enforcement Trends and Case Examples
The following enforcement trends illustrate the types of conduct that have generated significant FCA liability for healthcare providers in recent years:
Upcoding Settlements
Multiple healthcare systems and physician groups have agreed to multimillion-dollar settlements for systematic upcoding of evaluation and management services. In many of these cases, the government alleged that providers routinely billed at higher E/M levels than their documentation supported, resulting in overpayments across thousands of claims.
Kickback-Related FCA Cases
Large pharmaceutical companies, medical device manufacturers, and healthcare systems have paid hundreds of millions of dollars to resolve FCA allegations arising from Anti-Kickback Statute violations. These cases demonstrate that claims generated through kickback arrangements are automatically false claims, regardless of whether the underlying services were medically necessary or accurately coded.
Failure to Refund Overpayments
The DOJ has pursued FCA actions against providers that identified overpayments but failed to return them within the 60-day window. These “reverse false claims” cases reinforce the importance of timely overpayment identification and repayment systems.
Whistleblower-Initiated Cases
Over 60% of FCA healthcare recoveries originate from qui tam lawsuits filed by whistleblowers. These cases are frequently initiated by billing staff, compliance officers, and other insiders who identified non-compliant practices and reported them to the government after internal concerns were not adequately addressed.
How Medical Practices Can Protect Themselves
Proactive compliance is the most effective defense against FCA liability. The following strategies provide a framework for reducing your practice’s FCA exposure:
Implement a Compliance Program Aligned with OIG Guidance
Establish a compliance program that incorporates the OIG’s seven elements, including written policies, designated compliance oversight, regular training, effective communication channels, monitoring and auditing, enforcement of disciplinary standards, and prompt response to identified issues. A documented compliance program demonstrates the practice’s commitment to lawful billing practices.
Conduct Regular Coding and Documentation Audits
Prospective and retrospective coding audits are the most direct mechanism for identifying and correcting billing errors before they accumulate into patterns that attract enforcement attention. Audits should be conducted by qualified coding professionals (preferably certified medical auditors) and should cover a representative sample of claims across all providers and service lines.
Train All Staff on Billing Accuracy and Compliance
Every individual who participates in the billing process, from physicians who document encounters to coders who assign codes to billing staff who submit claims, should receive regular training on accurate coding, documentation requirements, and the consequences of billing errors. Training should be documented and updated annually.
Establish Overpayment Identification and Refund Processes
Develop written procedures for identifying, investigating, quantifying, and returning overpayments within the 60-day timeframe. The process should include clear escalation pathways, documentation requirements, and designated responsibility for ensuring timely resolution.
Evaluate All Financial Relationships for AKS and Stark Compliance
Because AKS and Stark violations automatically generate FCA liability, ensuring the compliance of all referral relationships and financial arrangements is a critical FCA prevention strategy. Conduct a comprehensive financial relationship inventory and evaluate each arrangement against applicable safe harbors and exceptions. For detailed guidance, see our companion article: Anti-Kickback Statute and Stark Law in 2026: What Every Medical Practice Needs to Know.
Create a Culture of Compliance Reporting
Establish confidential channels through which employees can report compliance concerns without fear of retaliation. Many qui tam cases are filed by employees who attempted to raise issues internally but felt their concerns were ignored or suppressed. Practices that take internal reports seriously and respond with prompt investigation and remediation significantly reduce their qui tam risk.
Respond Promptly to Identified Issues
When compliance issues are identified, whether through internal audits, employee reports, or external notifications, respond promptly with investigation, corrective action, and, where appropriate, voluntary disclosure. Delayed or inadequate responses to known issues can establish the deliberate ignorance or reckless disregard necessary for FCA liability.
What to Do If Your Practice Faces an FCA Investigation
If your practice receives a Civil Investigative Demand (CID), subpoena, or other indication that it is the subject of an FCA investigation, the following steps are critical:
- Engage experienced legal counsel immediately. FCA investigations are serious matters that require specialized healthcare fraud defense expertise. Do not attempt to respond to government inquiries without qualified representation.
- Preserve all relevant documents. Implement a litigation hold to prevent the destruction or alteration of any documents, electronic records, or communications that may be relevant to the investigation. Document destruction after receiving notice of an investigation can result in additional penalties and adverse inferences.
- Do not discuss the investigation with outside parties. Limit knowledge of the investigation to those who need to know and communicate only through or with the guidance of legal counsel.
- Assess the scope of potential liability. Work with legal counsel and compliance professionals to evaluate the allegations, quantify potential exposure, and identify any mitigating factors (such as a robust compliance program, voluntary disclosure, or prompt corrective action).
- Consider the OIG Self-Disclosure Protocol. If the investigation reveals actual violations, voluntary disclosure through the OIG Self-Disclosure Protocol can result in significantly reduced penalties and demonstrate the practice’s good faith. DoctorsManagement can assist in evaluating whether self-disclosure is appropriate and guide the process if pursued.
How DoctorsManagement Helps Practices Prevent and Respond to FCA Risk
DoctorsManagement provides comprehensive compliance services designed to help medical practices prevent FCA exposure and respond effectively when compliance issues arise. With over 40 years of experience serving physician practices across all specialties, our team understands both the regulatory requirements and the practical realities of medical practice operations.
Our FCA-related services include:
- Coding and Documentation Review: Expert audits of your coding and documentation practices to identify error patterns, quantify accuracy rates, and provide targeted training to prevent claim submission errors
- Healthcare Compliance Audits: Comprehensive evaluations of your billing operations, referral relationships, and compliance infrastructure to identify and remediate FCA risk areas
- Audit Appeal and Defense: Experienced support when your practice faces audit inquiries, investigations, or demands for repayment, including assistance with corrective action plans and negotiations with government agencies
- Compliance Training Programs: Customized education for physicians, coders, billing staff, and administrators on accurate billing, documentation requirements, and FCA prevention strategies
- Self-Disclosure Support: Guidance through the OIG Self-Disclosure Protocol when voluntary disclosure is appropriate, including damage calculation, remediation planning, and negotiation support
Contact DoctorsManagement at www.doctorsmanagement.com or call (800) 635-4040 to schedule a consultation about protecting your practice from False Claims Act exposure.
Frequently Asked Questions
External Resources and References
- False Claims Act Overview (DOJ)
- OIG Fraud and Abuse Laws for Physicians
- OIG Self-Disclosure Information
- CMS 60-Day Overpayment Rule
- Health Care Compliance Association (HCCA)
- American Academy of Professional Coders (AAPC)
- DoctorsManagement Coding and Documentation Review
- DoctorsManagement Audit Appeal and Defense
This article is provided for informational and educational purposes only and does not constitute legal advice. Healthcare compliance requirements vary based on specific circumstances, and practices should consult with qualified legal and compliance professionals when evaluating potential False Claims Act exposure or responding to government inquiries. DoctorsManagement is available to provide compliance